Black Hat
3151 videos enrolled · 1 in the catalog
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Its playlists 50
The channel's own playlists, each with its videos in its own order. 610 of the channel's 3151 videos are in none of them.
- Black Hat Asia 2014
- Black Hat Asia 2015
- Black Hat Asia 2016
- Black Hat Asia 2017
- Black Hat Asia 2018
- Black Hat Asia 2019
- Black Hat Asia 2020
- Black Hat Asia 2021
- Black Hat Asia 2022
- Black Hat Asia 2023
- Black Hat Asia 2024
- Black Hat Asia 2025
- Black Hat Asia 2026
- Black Hat Europe 2014
- Black Hat Europe 2015
- Black Hat Europe 2016
- Black Hat Europe 2017
- Black Hat Europe 2018
- Black Hat Europe 2019
- Black Hat Europe 2020
- Black Hat Europe 2021
- Black Hat Europe 2022
- Black Hat Europe 2023
- Black Hat Europe 2024
- Black Hat Europe 2025
- Black Hat Europe 2026
- Black Hat Fast Chats
- Black Hat Intercepted
- Black Hat Stories
- Black Hat USA 2013
- Black Hat USA 2014
- Black Hat USA 2015
- Black Hat USA 2016
- Black Hat USA 2017
- Black Hat USA 2018
- Black Hat USA 2019
- Black Hat USA 2020
- Black Hat USA 2021
- Black Hat USA 2022
- Black Hat USA 2023
- Black Hat USA 2024
- Black Hat USA 2025
- Black Hat USA 2026
- Black Hat Vault
- Black Hat Webcasts
- Executive Interviews
- SecTor 2024
- SecTor 2025
- SecTor 2026
- Speaker Spotlight Videos
One Hack to Rule Them All: Pervasive Account Takeovers in Integration Platforms
Operation BlackEcho: Voice Phishing Using Fake Financial and Vaccine Apps
Operation MIDAS - Tracking Fraudulent Financial Program Organizations
Ops! It is JTAG's Fault: Journey to Unlocking Automotive Grade IC
Over the Air: Compromise of Modern Volkswagen Group Vehicles
Overcoming State: Finding Baseband Vulnerabilities by Fuzzing Layer-2
OVPNX: 4 Zero-Days Leading to RCE, LPE and KCE (via BYOVD) Affecting Millions of OpenVPN Endpoints
PageJack: A Powerful Exploit Technique With Page-Level UAF
Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials
Predict, Prioritize, Patch: How Microsoft Harnesses LLMs for Security Response
Project 0xA11C: Deoxidizing the Rust Malware Ecosystem
PyLingual: A Python Decompilation Framework for Evolving Python Versions
Quantum Security: Myths, Facts, and Realities
QuickShell: Sharing is Caring About an RCE Attack Chain on Quick Share
Reasonable Regs vs Red Tape: How Should Governments Tackle the Cyber Intrusion Market
Redefining the Origin of Secrecy in a Post-Quantum World
Reinforcement Learning for Autonomous Resilient Cyber Defense
Relationships Matter: Reconstructing the Organizational and Social Structure of a Ransomware Gang
Remote Exploitation of Nissan Leaf: Controlling Critical Body Elements from the Internet
Remote, One-Click, Breaking through Smartphones via a Non Well-Known Remote Attack Surface
SecTor 2024 Highlights
SecTor 2024 Teaser
Secure Shells in Shambles
Securing Network Appliances: New Technologies and Old Challenges
Securing the Human: How Mimecast Tackles Email Threats and AI Risks
Security analysis of Residential Gateways and ISPs: global network domination is (sneakily) possible
Self-Hosted GitHub CI/CD Runners: Continuous Integration, Continuous Destruction
Should We Chat, Too? Security Analysis of WeChat's MMTLS Encryption Protocol
Skirting the Tornado: Essential Strategies for CISOs to Sidestep Government Fallout
SnailLoad: Anyone on the Internet Can Learn What You're Doing
SpAIware & More: Advanced Prompt Injection Exploits in LLM Applications
Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls
Standing on the Shoulders of Giants: De-Obfuscating WebAssembly Using LLVM
Stop! Sandboxing Exploitable Functions and Modules Using In-Kernel Machine Learning
Strengthen Cyber-security by Leveraging Cyber-Insurance
Super Hat Trick: Exploit Chrome and Firefox Four Times
Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign
Surveilling the Masses with Wi-Fi Positioning Systems
Sweeping the Blockchain: Unmasking Illicit Accounts in Web3 Scams
Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps
SysBumps: Exploiting Speculative Execution in System Calls for Breaking KASLR
Terrapin Attack: Breaking SSH Channel Integrity by Sequence Number Manipulation
That Gambling Site? It's Fueled by Chinese Organized Crime
The 10th Annual Black Hat USA Network Operations Center (NOC) Report
The Black Hat Asia Network Operations Center (NOC) Report
The Black Hat Europe Network Operations Center (NOC) Report
The Black Hat USA 2025 Startup Spotlight Competition
The Bugs in Your Bootloaders: Embedded Device Secure Boot Fails and How to Fix Them
The ByzRP Solution: A Global Operational Shield for RPKI Validators
The CVSS Deception: How We've Been Misled on Vulnerability Severity
The Devil is in the (Micro-) Architectures: Uncovering New Side-Channel and Bit-Flip Attack Surfaces
The Double (AI) Agent: Flipping a GenAI Agent Behavior
The Drone Supply Chain's Grand Siege: From Initial Breaches to Long-Term Espionage
The Fundamentals of Cyber-Insurance
The GCP Jenga Tower: Hacking Millions of Google's Servers With a Single Package (and more)
The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition
The Hidden Treasure of Crash Reports?
The Illusion of Isolation: How Isolation Failures in CI/CD Servers Lead to RCE and Privacy Risks
The Insecure IoT Cloud Strikes Again: RCE on all Ruijie Cloud-Connected Devices
The Overlooked Attack Surface: Diving into Windows Client Components for RCE Vulnerabilities
The Oversights Under the Flow: Discovering the Vulnerable Tooling Suites From Azure MLOps
The Pivotal Role of Large Language Models in Extracting Actionable TTP Attack Chains
The Problems of Embedded Python in Excel, or How to Excel in Pwning Pandas
The Way to Android Root: Exploiting Your GPU on Smartphone
Think Inside the Box: In-the-Wild Abuse of Windows Sandbox in Targeted Attacks
Threat Hunting with LLM: From Discovering APT SAAIWC to Tracking APTs with AI
Tinker Tailor LLM Spy: Investigate & Respond to Attacks on GenAI Chatbots
Tracing Origins: Navigating Content Authenticity in the Deepfake Era
TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities
Tunnel Vision: Exploring VPN Post-Exploitation Techniques
UNC1860 and The Temple of Oats - Iran's hidden hand in Middle Eastern Networks
Uncovering Supply Chain Attack with Code Genome Framework
Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea
UnOAuthorized: A Technique to Privilege Escalation to Global Administrator
Unraveling the Mind Behind the APT - Analyzing the Role of Pretexting in CTI and Attribution
Unveiling Mac Security: A Comprehensive Exploration of Sandboxing and AppData TCC
Unveiling New Attack Vectors in Bluetooth Vulnerability Discovery through Protocol State Machine
Unveiling the Power of Intune: Leveraging Intune for Breaking Into Your Cloud and On-Premise
Use Your Spell Against You: Threat Prevention of Smart Contract Exploit By Reusing Opcode Trace
Using Deep Learning Attribution Methods for Fault Injection Attacks
Utilizing AI Models to Conceal and Extract Commands in C2 Images
vCenter Lost: How the DCERPC Vulnerabilities Changed the Fate of ESXi
Vulnerabilities in the eSIM download protocol
Watch Your Phone: Novel USB-Based File Access Attacks Against Mobile Devices
We R in a Right Pickle With All These Insecure Serialization Formats
Weaponized Deception: Lessons from Indonesia's Muslim Cyber Army
What Lies Beneath the Surface? Evaluating LLMs for Offensive Cyber Capabilities
When (Remote) Shells Fall Into The Same Hole: Rooting DrayTek Routers Before Attackers Can
Who Cares Where Waldo Is. Locating macOS Users Without Their Consent
WiFi Calling: Revealing Downgrade Attacks and Not-so-private private Keys
Will We Survive the Transitive Vulnerability Locusts?
Windows Downdate: Downgrade Attacks Using Windows Updates
WorstFit: Unveiling Hidden Transformers in Windows ANSI!
You've Already Been Hacked: What if There Is a Backdoor in Your UEFI OROM?
34231 WhyCyberInsuranceShouldbeYourSOCsNewBestFriend v2
A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven
A Glimpse Into The Protocol: Fuzz Windows RDP Client For Fun And Profit
A Manufacturer's Post-Shipment Approach to Fend-Off IoT Malware in Home Appliances
A Pain in the NAS: Exploiting Cloud Connectivity to PWN Your NAS
A Q&A with a16z's Zane Lackey: Unlocking the Secrets of Cybersecurity Entrepreneurship